Information Security Manager

Data Analytics Ventures, Inc. | Go Rewards; Pasig; On-site; PHP 1,500,000 - 2,000,000; Full time

Job summary

Data Analytics Ventures, Inc. | Go Rewards is seeking an Information Security Manager. The role involves defining and implementing the information security strategy, ensuring data protection and compliance across cloud and partner integrations. The ideal candidate has over 8 years of experience in information security, strong knowledge of security frameworks, and excellent communication skills. The position offers competitive benefits and the opportunity to shape security strategies for a growing company in the fintech and loyalty sectors.

Qualifications

• 8–12+ years of experience in information security, cybersecurity, or technology risk roles.
• Proven experience securing cloud-native, API-driven, and partner-integrated platforms.
• Hands-on experience with security frameworks and standards such as ISO 27001, NIST CSF, CIS Controls, and OWASP.

Responsibilities

• Define and maintain the information security strategy, policies, and standards.
• Establish security monitoring, logging, and incident response processes.
• Drive security awareness and training programs for technology and business teams.

Skills

Experience in information security

Cloud security architectures

Identity and access management (IAM/CIAM)

Application and API security

Data protection and privacy

Education

Professional certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer)

Job description

The Information Security Manager is responsible for defining, implementing, and operating the information security and risk management framework for the company. This role ensures the confidentiality, integrity, and availability of systems and data across a complex ecosystem of internal teams, cloud platforms, and external partners, while enabling secure business growth and digital innovation.

What can you tell your friends when they ask what you do?

I protect millions of loyalty members’ data and points transactions across airlines, banks, retailers, and digital platforms. I make sure our systems are secure, compliant, and resilient – so members can trust us with their identity, their data, and their rewards, and partners can confidently integrate with us.

Responsibilities – How will you do this?

Security Strategy & Governance

• Define and maintain the information security strategy, policies, standards, and operating model aligned with business objectives.
• Establish and operate security governance, risk management, and compliance frameworks (e.g., ISO 27001, NIST CSF).
• Partner with legal, compliance, and risk teams to ensure regulatory and contractual security obligations are met.
• Conduct security risk assessments, threat modeling, and control gap analyses across applications, platforms, and integrations.
• Define and monitor security controls for identity, access, data protection, infrastructure, and application security.
• Manage third‑party and partner security assessments, due diligence, and ongoing risk reviews.
• Embed security‑by‑design into architecture, software development, and platform operations.
• Oversee secure authentication, authorization, CIAM, API security, encryption, key management, and secrets handling.
• Define and enforce security requirements for cloud, containerized, and microservices‑based environments.

Security Operations & Incident Management

• Establish security monitoring, logging, and incident response processes.
• Lead investigation and response to security incidents, breaches, and vulnerabilities.
• Coordinate post‑incident reviews, root cause analysis, and remediation plans.
• Drive security awareness and training programs for technology and business teams.
• Act as a trusted advisor to product, engineering, data, and partner teams.
• Continuously improve security posture through metrics, audits, and industry best practices.

To be successful, you’ll need

Experience & Technical Skills

• 8–12+ years of experience in information security, cybersecurity, or technology risk roles.
• Proven experience securing cloud‑native, API‑driven, and partner‑integrated platforms.
• Strong understanding of:
• Identity and access management (IAM/CIAM)
• Application and API security
• Data protection and privacy
• Cloud security architectures
• Hands‑on experience with security frameworks and standards such as ISO 27001, NIST CSF, CIS Controls, and OWASP.
• Experience operating security in regulated, high‑transaction environments (e.g., fintech, loyalty, payments, airlines, retail).
• Ability to balance security rigor with business agility and delivery speed.
• Strong analytical and decision‑making skills in risk‑based environments.

Communication & Influence

• Able to communicate security risks and trade‑offs clearly to technical and non‑technical stakeholders.
• Comfortable working with external auditors, partners, and regulators.
• Demonstrated ability to influence without authority across cross‑functional teams.

Nice to Have

• Professional certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer).
• Experience with coalition or ecosystem‑based business models.
• Exposure to privacy regulations and data localization requirements.

Be an Ideal Team Player

• Hungry: Bias for action and continuous improvement.
• Humble: Team‑oriented and open to feedback.
• Smart: Emotionally intelligent and effective in working with diverse stakeholders.

About Data Analytics Ventures Inc. (DAVI)

Data Analytics Ventures, Inc. (DAVI) is the Gokongwei Group’s loyalty and data analytics company. Aside from managing Go Rewards, the loyalty program of the Gokongwei Group which includes Cebu Pacific and Robinsons Retail Holdings, DAVI also plays a pivotal role in driving consumer insights through data science. This combination enables DAVI to create a loyalty program that delivers on rewarding experiences and harnessing data to fuel business growth.